Is this site affected 1 of the 6 or so new openssl vulnerabilities ?

Peter882

hero member

Activity: 543

Merit: 500

Quote from: Mikez on June 07, 2014, 06:05:05 AM

Here's another thread on the new vulnerabibilities: https://bitcointalksearch.org/topic/new-openssl-vulnerability-640430

I believe that thread in "Development & Technical Discussion" focuses on the affects on the wallet client, while this one in "Meta" focuses on the forum itself.

Mikez

hero member

Activity: 508

Merit: 500

Here's another thread on the new vulnerabibilities: https://bitcointalksearch.org/topic/new-openssl-vulnerability-640430

Justin00

legendary

Activity: 910

Merit: 1000

★YoBit.Net★ 350+ Coins Exchange & Dice

good man theymos.

I must apologise for an hositility I have shown towards you in the past; however I will still keep you on your toes, espeaclly when security and what not is at stake

Quote from: theymos on June 06, 2014, 01:52:18 PM

The forum's OpenSSL was updated yesterday.

Quote from: BCwinning on June 06, 2014, 01:07:46 PM

Those only affect systems that are affected by heartbleed. So if openssl has been upgraded from the
affected version there is no issues.

No, it's unrelated to heartbleed

theymos

administrator

Activity: 5166

Merit: 12850

The forum's OpenSSL was updated yesterday.

Quote from: BCwinning on June 06, 2014, 01:07:46 PM

Those only affect systems that are affected by heartbleed. So if openssl has been upgraded from the
affected version there is no issues.

No, it's unrelated to heartbleed

shorena

copper member

Activity: 1498

Merit: 1499

No I dont escrow anymore.

Quote from: abacus on June 06, 2014, 01:24:29 PM

Quote from: BCwinning on June 06, 2014, 01:07:46 PM

Those only affect systems that are affected by heartbleed. So if openssl has been upgraded from the
affected version there is no issues.

Oh, good to know. Then there's a bit of FUD in many articles about this news.

Its FUD that this only affects systems that are affected by the heartbleed bug. One of the new bugs is in code that the same person wrote who did the misstakes in heartbleed, maybe thats where this missunderstanding comes from.
From what I read noone uses DTLS anyway. Anonymous ECDH is not used by the forum and barely any homepage for that matter because most use certificates anyway. The only thing that could affect us would be the possible MITM for Bitcoin, but than not really doing any damage AFAIK. You can MITM with Bitcoin anyway, but not get the juicy stuff (private keys).

abacus

hero member

Activity: 618

Merit: 500

a clockwork miner

Quote from: BCwinning on June 06, 2014, 01:07:46 PM

Those only affect systems that are affected by heartbleed. So if openssl has been upgraded from the
affected version there is no issues.

Oh, good to know. Then there's a bit of FUD in many articles about this news.

BCwinning

hero member

Activity: 770

Merit: 500

Quote from: abacus on June 06, 2014, 01:06:12 PM

Quote from: Mikez on June 06, 2014, 08:41:15 AM

Have new vulnerabilies surfaced?

Yes, yesterday:
https://www.openssl.org/news/secadv_20140605.txt

Those only affect systems that are affected by heartbleed. So if openssl has been upgraded from the
affected version there is no issues.

abacus

hero member

Activity: 618

Merit: 500

a clockwork miner

Quote from: Mikez on June 06, 2014, 08:41:15 AM

Have new vulnerabilies surfaced?

Yes, yesterday:
https://www.openssl.org/news/secadv_20140605.txt

Mikez

hero member

Activity: 508

Merit: 500

As far as I know, and as theymos announced, bitcointalk is not heartbleed vulnerable anymore. Have new vulnerabilies surfaced?
I used a couple of SSL checkers just now and everything seemed fine.

Justin00

legendary

Activity: 910

Merit: 1000

★YoBit.Net★ 350+ Coins Exchange & Dice

have not had a chance to fully vertify the new vulnerabilities.
hopefully theymos had ?

any chance you have been able to see if the site is vulnerable ?? from a quick glance one of them were quite serious...

Topic: Is this site affected 1 of the 6 or so new openssl vulnerabilities ? (Read 494 times)